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Claims 

(Currently Amended) A method for providing secure guaranteed transactions over a 
computer network, said transactions conducted between a user and a recipient merchant, 
said method comprising the steps of 

a) authenticating a user; 

b) receiving a recipient merchant request; 

c) generating an authentication document, if said user is authentic; 

d) adding a digital signature to said authentication document; and 

e) transmitting said authentication document and a URL link comprising a 
recipient merchant site address to said user, whereby the user can access 

said recipient merchant site by activating said URL link . 

(Original) The method of claim 1, wherein said merchant has at least one encryption key, 
further comprising the step of 

f) encrypting said authentication document with the encryption key of said 
merchant before performing said transmitting step (e). 

(Original) The method of claim 2 wherein said encryption key is a shared encryption key 
between a guarantor and said merchant. 

(Original) The method of claim 2 wherein said encryption key is a public key of said 
merchant. 

(Cancelled). 
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6. (Currently Amended) A method for providing secure guaranteed transactions over a 
computer network, said transactions conducted between a user and a recipient merchant, 
said merchant having at least one public encryption key and a corresponding private key, 
said method comprising the steps of 

(a) authenticating a user; 

(b) receiving a recipient merchant request; 

(c) generating an authentication document, if said user is authentic; 

(d) adding a digital signature to said authentication document, 

(e) encrypting said authentication document with the public key of said 
recipient merchant; and 

(f) transmitting said encrypted authentication document to said user, 

wherein said transmitting step (f) further comprises the steps of packaging said encrypted 
authentication document as an open cookie; and transmitting said open cookie to said 
user. 

7. (Cancelled) 

8. (Currently Amended) The method of claim 1, 5, 6 or 7 or 6 wherein said authentication 
document includes payment information corresponding to said user. 

9. (Original) The method of claim 8 wherein said authentication document further includes 
a guarantee number and a time stamp. 
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10. (Original) The method of claim 8 wherein said authentication document further includes 
a guarantee number and a time limit. 

11. (Currently Amended) The method of claim 1, 5, 6 or 7 or 6 wherein said authentication 
document is signed with a private key of said guarantor. 

12. (Currently Amended) The method of claim 1, 5, 6 or 7 or 6 wherein said digital signature 
in step (d) is created with a secret key of said guarantor using a key-dependent one way 
hash- function, and wherein said recipient merchant possesses said secret key. 

13. (Currently Amended) The method of claim 1, 5, 6 or 7 or 6 wherein said digital signature 
in step (d) is generated with a private key of said guarantor using an asymmetric 
algorithm. 

14. (Currently Amended) The method of claim 1, 5, 6 or 7 or 6 wherein said adding step (d) 
comprises the steps of 

(d 1 ) hashing said authentication document; 

(d2) creating a digital signature by applying a public-key algorithm to said 

hashed authentication document using a private key of said guarantor; and 

(d3) adding said digital signature to said authentication document. 

15. (Currently Amended) The method of claim 6 &r-l wherein said public key and said 
private key are shared by at least two recipient merchants. 

16. (Currently Amended) An apparatus for providing secure guaranteed transactions over a 
computer network, said transactions conducted between a user and a recipient merchant, 
said user authenticated by a guarantor, said apparatus comprising^ 
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a database, said database containing a list user accounts and passwords, or 
encrypted representations thereof, corresponding to said user accounts; and 

a server operably coupled to said database, said server comprising! 

means for authenticating a user and receiving a recipient merchant request; 

means for generating an authentication document; 

means for adding a digital signature to said authentication document, 
means for generating a URL link comprising a recipient merchant site 
address ; and 

means for transmitting said encrypted authentication document and said URL 
link to said user. 

17. (Original) The apparatus of claim 16 wherein said merchant having at least one public 
encryption key, further comprising means for encrypting said authentication document 
with the public key of said recipient merchant. 

18. (Original) The apparatus of claim 16 or 17 wherein said transmitting means further 
comprises means for packaging said authentication document as an open cookie. 

19. (Cancelled) 

20. (Currently Amended) A method for providing secure guaranteed transactions over a 
computer network, said transactions conducted between a user and a recipient merchant, 
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said merchant having at least one public encryption key, said user authenticated by a 
guarantor, said method comprising the steps of 

a) receiving an authentication document from a user, said authentication 
document encrypted with a public encryption key of said recipient merchant 
and including a digital signature; 

b) decrypting said authentication document with the corresponding private 
key of said recipient merchant; 

c) authenticating said digital signature; and 

d) processing the user's request, if said digital signature is authentic and said 
authentication document is valid, 

wherein said authentication document is packaged as an open cookie and wherein said 
receiving step (a) comprises uploading said open cookie . 

21. (Cancelled). 

22. (Currently Amended) The method of claim 20 or 21 wherein said authentication 
document includes payment information, wherein said user request is a purchase request, 
and wherein said processing step (d) further comprises using said payment information in 
said authentication document to complete a transaction. 

23. (Currently Amended) The method of claim 1 claim 20 wherein said recipient merchant 
request includes a merchant transaction identifier; and wherein said authentication 
document generated in step (c) includes said merchant transaction identifier. 
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24. (Original) The method of claim 23 wherein said recipient merchant request originates 
from a merchant as a redirect message transmitted to said user. 

25. (Currently Amended) A method for providing secure guaranteed transactions over a 
computer network, said transactions conducted between a user and a recipient merchant, 
said method comprising the steps of 

a) authenticating a user; 

b) receiving a recipient merchant request, said recipient merchant request 
including a merchant transaction identifier; 

c) generating an authentication document including said merchant 
transaction identifier, if said user is authentic; 

d) adding a digital signature to said authentication document; and 

e) transmitting said authentication document to said user, 

wherein said recipient merchant request originates from a merchant as a redirect message 
transmitted to said user. 

26. (Cancelled). 
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